Connecticut privacy enforcement and bill expansion
Coverage from Kelley Drye & Warren LLP, WSHU, and others
Articles
13
Latest Article
05/27
Active Days
118
Executive Summary
The cluster is centered on Connecticut's privacy regime tightening through both enforcement reporting and active legislation. The dominant current signal is a move from baseline CTDPA implementation toward more specific compliance pressure on breach notifications, data-rights handling, opt-out enforcement, data broker practices, and sensitive-data restrictions. The strongest recent development is SB 4, which expands consumer control over broker-held data and limits geolocation, facial recognition, and surveillance pricing uses. The broader pattern is a state-level privacy escalation with recurring emphasis on operational compliance, consumer deletion rights, and protections for minors and genetic data.

Key Points
- Connecticut AG enforcement report becomes a key reference point for current privacy expectations.
- Breach notifications, delayed disclosure, and warning letters are a major enforcement theme.
- SB 4 advances through the legislature and expands controls on data brokers and sensitive data.
- Facial recognition, geolocation data, and surveillance pricing are recurring regulatory targets.
- Genetic and DNA privacy appear as narrower but important extensions of the same privacy framework.
- Business concerns center on compliance burden, scope, and technical feasibility.
